Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for Django ORM .raw method to SQL parameterization codemod #442

Open
drdavella opened this issue Apr 4, 2024 · 0 comments
Open
Labels
enhancement New feature or request

Comments

@drdavella
Copy link
Member

Various ORMs (e.g. SQLAlchemy, Django) enable pass-thru execution of raw SQL queries. We need to consider these methods when finding and fixing potential SQL injection vulnerabilities. In the Django ORM specifically, this is enabled via the .raw method: https://docs.djangoproject.com/en/5.0/topics/db/sql/#performing-raw-sql-queries

@drdavella drdavella added the enhancement New feature or request label Apr 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant